Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/241308BEB54611EB9C6B4187C4F9AE02.roa
File: 241308BEB54611EB9C6B4187C4F9AE02.roa (raw, json)
Hash identifier: OfgQv1ndGt754MSAv+6CJhCd5mGb0AN5M2Ts7GApeDs=
Subject key identifier: C6:F6:18:04:D2:56:C4:53:B9:A1:83:68:44:18:5A:AC:D2:05:8F:7C
Certificate issuer: /CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Certificate serial: 099B
Authority key identifier: 9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/241308BEB54611EB9C6B4187C4F9AE02.roa
Signing time: Wed 20 Oct 2021 07:26:54 +0000
ROA not before: Wed 20 Oct 2021 07:26:54 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 24433
IP address blocks: 138.77.0.0/16 maxlen: 16
138.77.104.0/21 maxlen: 21
138.77.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2459 (0x99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917473D/serialNumber=9C68F4BB98F5F8AE9D56327DF599B3C1180795F1
Validity
Not Before: Oct 20 07:26:54 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=616fc4be-e3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:8c:90:f5:94:d1:4e:a7:9d:e1:22:b5:90:
6e:1d:29:1d:af:6e:6c:87:f1:89:85:20:89:f9:63:
f8:c5:9b:ae:b7:94:82:ef:a9:91:b5:a3:b1:d0:71:
98:e0:f2:9b:99:2f:61:24:73:f5:01:67:3d:a1:12:
73:a7:2a:09:22:9b:7a:17:ff:88:b8:0a:a6:61:d8:
8e:7a:cb:cc:d8:dc:a8:f2:85:ed:8d:da:46:f7:c4:
1f:0e:d4:d1:7a:f9:bd:ea:69:b0:ce:db:cc:98:a4:
b8:eb:19:10:78:c8:fa:89:29:2d:8d:19:e4:16:0e:
13:c3:18:c8:f0:91:e4:25:72:f7:91:7a:eb:ea:77:
56:8f:2d:a9:29:61:82:2b:70:de:57:69:08:1b:8b:
b7:44:8a:54:02:bc:a9:0d:e4:ab:d4:1c:ab:01:36:
10:a3:0c:e1:ae:3c:65:fc:90:d0:10:ec:81:f2:b5:
d2:75:6d:c6:e1:6c:d7:3d:7c:5e:01:d1:a2:eb:5e:
c6:af:43:e3:af:f0:99:0c:d3:bf:c1:73:da:2a:98:
a8:ff:4e:60:27:d4:23:ee:69:93:d8:51:39:ab:46:
42:94:0a:c8:a6:83:45:a1:01:d6:b3:37:36:40:03:
32:15:ee:0a:83:25:d8:00:bd:ef:2d:91:f3:87:63:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:18:04:D2:56:C4:53:B9:A1:83:68:44:18:5A:AC:D2:05:8F:7C
X509v3 Authority Key Identifier:
keyid:9C:68:F4:BB:98:F5:F8:AE:9D:56:32:7D:F5:99:B3:C1:18:07:95:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nGj0u5j1-K6dVjJ99ZmzwRgHlfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917473D/527594769EDA11E99674B877C4F9AE02/241308BEB54611EB9C6B4187C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:9a:b7:9b:28:6f:83:6f:c9:42:db:16:2e:3a:28:e7:e3:76:
76:7c:a4:fc:b2:54:8b:11:7a:e3:37:32:d7:51:e6:7f:77:11:
73:eb:97:9a:d2:20:9d:15:c0:c8:24:c6:95:0c:11:b5:71:8f:
cd:be:e0:8b:af:ad:f3:b7:5a:ea:05:19:48:fc:c6:04:9f:13:
aa:f1:14:c9:98:b8:4f:f1:5e:e9:5c:59:7c:89:e2:60:85:a5:
c6:ed:d9:b2:9b:31:15:0e:52:41:e8:e3:89:d4:e8:93:7d:74:
34:d7:64:06:f7:0a:1b:2a:44:78:74:12:4f:1b:dd:19:6c:dd:
44:2d:90:90:cf:b2:37:8d:be:b8:50:3f:26:c0:44:26:e9:4a:
35:07:48:f5:81:83:c7:d3:32:3b:76:12:5c:26:cf:11:bc:82:
e0:30:d1:10:a5:18:ed:84:d7:22:4f:67:53:3d:b2:c0:d1:2d:
2a:e2:ee:ad:35:fa:f3:c2:8a:bc:14:f9:19:ca:23:08:91:7f:
06:bc:44:a9:8d:8c:f9:08:7e:b5:7e:e4:74:31:b8:ff:46:99:
d6:d8:17:26:27:52:89:c9:c3:77:d6:ae:90:ee:12:46:00:50:
6b:2a:a5:34:77:05:26:3c:4b:1c:cc:24:d4:7b:31:51:5a:78:
cb:5d:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-ams.rpki-client.org